@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-55854 via mariadb (>=3.3.0, <=3.3.2)

🗓️ 28 Aug 2026 22:04:53Reported by Vulners OSVType

vulnersosv🔗 osv.dev👁 4 Views

Known vulnerability in mariadb NPM v3.3.0-3.3.2 affecting multiple transitive dependent packages.

Reporter	Title	Published	Views	Family All 24
Chainguard	CVE-2026-55854 vulnerabilities	7 Sep 202620:56	–	cgr
Circl	CVE-2026-55854	29 Aug 202616:31	–	circl
CVE	CVE-2026-55854	28 Aug 202622:03	–	cve
Cvelist	CVE-2026-55854 MariaDB Connector/Node.js: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials in mariadb	28 Aug 202622:03	–	cvelist
EUVD	EUVD-2026-68010	28 Aug 202622:03	–	euvd
Github Security Blog	MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials	28 Aug 202622:04	–	github
NVD	CVE-2026-55854	28 Aug 202623:17	–	nvd
OSV	BIT-MARIADB-2026-55854 MariaDB Connector/Node.js: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials in mariadb	2 Sep 202614:46	–	osv
OSV	BIT-MARIADB-MIN-2026-55854 MariaDB Connector/Node.js: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials in mariadb	2 Sep 202614:46	–	osv
OSV	BIT-MYSQL-CLIENT-2026-55854 MariaDB Connector/Node.js: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials in mariadb	2 Sep 202614:49	–	osv

02 Sep 2026 16:25Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.9

EPSS0.00278

SSVC

mariadb NPM package transitive dependency CVE-2026-55854 library